Welcome back in the previous week or lecture we have Datamart psychodramas constellation in direction.
Now in this lecture we will look at them on secular misconfiguration
Yeah I'm using those who have broken my obligation first Yagan see that security misconfiguration and
Sickert and Mr. debate just
by these pages.
Their aim is to try to find some hidden pages which the administrator has actually hided from the user.
What obligation is actually including on the pages from this parameter pages.
What we can do is we can actually try to brute force or we can actually try to find de-friend different
pages by doing seven different attacks Laeg dictionary attack brute force attacks or the security misconfiguration
issues actually of course whenever wrong business are yvel application logic is made by one application
developer.
Let's open up suit here.
I'm using rewash in here you can see that buzzard.
Welcome back.
In the previous year lecture we have talked about secondments contribution in direction.
Now in this lecture we will look at them on record misconfiguration.
Yeah I'm using all those who have broken my obligation first.
You can see that security misconfiguration N.S.A. and Mr debaters by these pages.
The aim is to try to find some hidden pages which the administrator has actually hided from the user
of location is actually including all the pages from these parameter pages.
What we can do is we can add
let's open up into the this intruder.
We can actually attack develop the question through different different ways like we can do password
guessing attacks are dictionary attacks are brute forcing attacks and so on.
The first thing you will see here the target IP address port is a zero.
Now let's click our positions.
The positions is the main thing which we can do we take care of now that the position is no positions
are actually the points on which we want to do attack or we want to repeat first.
Actually the positions like they are now against the request send this request multiple times to the
server because we want page and it should be changed in every request.
So now why we can do is we have to select this thing.
Which we want to repeat Are we want to change.
Then click on Add And here you will see that this position has been selected now.
So here are the different attack that selects Knepper as it is.
Now once we did this we have to select the payload we want to use.
Here we will see the payload said one and payload type.
A simple list.
There are a lot of other payloads like runtime file case modification and except for.
We can add a list of possible pages list but that's only available for a portion means we have to purchase
a license or potion in order to access and add an user name list and password list and so now we can
do is we can manually add items in a list let's add admin not HP
welcomed updates we
paid to be done not be just any random fires not be SB and he Danto.
So now what will happen is our butts will send the same request to the Tigard what obligation these
different pages might adding here.
Let's go back to our payload now.
You can see that Paillard has been selected here.
You can start attack.
Let's go here to enter and click on start at Otherwise you can directly click on board here and click
Start a deck.
Now click on OK.
You can see that Buff has started a back.
Now it's finished.
So here we can see that the request number below is status code and it's land.
So if I just click on back on the page be you will see is the request.
So here is the same request.
So you can see the status is 200.
OK.
Now let's see the Esti malcontent and let's just render the estimate content to see how this page looks
like whether this page is present or not.
Here you will see four not four page not form.
Now let's look at mindor page.
Here you will see that you are successfully able to find a secret page inside the target location.
Here you will find where we'll just go there and you will see that a secret baby configuration page
you can find a PSP configuration and saw them to help us do.
They actually had some important pages important directories from the user by just changing their names
are dagger just try to brute force our guest that directory attack.
If we get these hidden files our directory he can do whatever he wants.
That's aired in the security misconfiguration.
Thank you.
See you in next class.